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METHOD AND DEVICE FOR PROTECTING DATA STORED 
IN A COMPUTING DEVICE 



CLAIMS i 

5 

1. A device for protecting data, comprising: 

an interface for connection to a computing 

device; 

a data storage; 
lo an encryptor located in-line between said 

interface and said data storage; 

a control system; and 
a memory; 

wherein said memory includes program data 
15 executable on said computing device to perform user 
authentication , said control system is configured to 
initially expose said memory to said interface to 
facilitate user authentication and to expose said 
encryptor to said interface only upon successful user 
2 0 authentication, and said encryptor is operable to encrypt 
on the fly data received from said interface and to 
fprward said data once encrypted to said data storage and 
to decrypt on the fly data received from said data storage 
and to forward said data once decrypted to said interface. 

25 

2. A device as claimed in claim 1, wherein said control 
system is configured to reboot said computing device after 
successful user authentication and before exposing said 
encryptor to said interface. 

30 

3. A device as claimed in claim 1, wherein said memory 
comprises a portion of a memory storage system provided 
with one or more bootable programs. 



35 



4. A device for protecting data, comprising: 

a first interface for connection to a computing 

device; 
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a second interface for connection to a data 

s torage ; 

an encryptor located in-line between said first 
interface and said second interface; 
5 a control system; and 

a memory; 

wherein said memory includes program data 
executable on said computing device to perform user 
authentication, said control system is configured to 

10 initially expose said memory to said interface to 
facilitate user authentication and to expose said 
encryptor to said interface only upon successful user 
authentication, and said encryptor is operable to encrypt 
on the fly data received from said first interface and to 

15 forward said data once encrypted to said second interface 
and to decrypt on the fly data received from said second 
interface and to forward said data once decrypted to said 
first interface. 

20 5. A device as claimed in claim 4, wherein said control 

system is configured to reboot said computing device after 
successful user authentication and before exposing said 
encryptor to said interface. 

25 6. A method of protecting data, comprising! 

locating an encryptor in-line between a data 
storage and an interface to a computing device- 
exposing a memory to said interface to 
facilitate user authentication; 
30 exposing said encryptor to said interface only 

upon successful user authentication; 

encrypting on the fly data received from said 
first interface and forwarding said data once encrypted to 
said second interface; and 
35 decrypting on the fly data received from said 

second interface and forwarding said data once decrypted 
to said first interface. 



